Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: 4QwBNBXU6mOaWCn9RwdHhviya64gMjoC5Jm2O5RO7tQ=
Subject key identifier: A5:C3:B8:0D:3B:2C:48:31:2E:B9:94:E3:17:84:41:71:00:F4:AB:0E
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 019A4EF5F1F564FCABB88E03E267494C12DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 06F9
Signing time: Tue 04 Nov 2025 13:02:12 +0000
Manifest this update: Tue 04 Nov 2025 13:02:12 +0000
Manifest next update: Wed 05 Nov 2025 13:02:12 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: 3hRnSOW8S+6CGbFD77nWlKDBypTWD43L2R9Dm44BMVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f1:f5:64:fc:ab:b8:8e:03:e2:67:49:4c:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Nov 4 13:02:12 2025 GMT
Not After : Nov 5 13:02:12 2025 GMT
Subject: CN=a5c3b80d3b2c48312eb994e31784417100f4ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:fe:5d:b3:57:e1:5b:cf:8b:fb:0e:fa:30:
d0:b4:f4:d7:ea:25:ae:55:75:ba:ba:a8:d7:77:ac:
01:08:3e:53:ce:08:2a:3c:a1:a5:d8:ac:14:c0:b2:
b3:0e:a2:53:cb:20:11:8c:b1:0b:64:24:a4:f8:ed:
48:91:9d:4e:cc:85:57:41:67:1f:13:34:d0:32:a3:
52:3e:0f:22:9f:6b:30:1a:d1:a3:6e:ca:d5:7c:d9:
12:cf:99:34:83:50:55:a0:2d:ce:d9:a3:33:0f:34:
e0:34:04:09:25:93:d0:f2:42:ec:11:48:d2:68:b8:
fb:8c:09:ce:93:4f:50:21:e6:1a:6c:22:ff:a2:21:
59:79:1e:cd:6a:48:54:f8:5d:ef:6a:f3:de:66:96:
11:5e:4d:28:49:f5:fa:47:1d:dd:9b:e5:37:12:77:
64:bd:cf:ca:30:9e:cf:00:4a:52:02:2b:6c:05:17:
56:51:40:19:f4:5e:d6:9b:23:8e:9c:1b:82:9d:6f:
f0:c7:a3:fa:20:4b:92:0a:19:2f:db:9a:f5:f8:93:
07:d1:f8:8a:7a:b8:e0:f4:6b:39:4b:8d:6e:3a:98:
de:68:69:e8:56:3b:3b:13:35:ca:bd:76:a6:e4:44:
b3:67:bf:64:de:04:7e:c5:bf:94:40:c0:e4:c6:18:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C3:B8:0D:3B:2C:48:31:2E:B9:94:E3:17:84:41:71:00:F4:AB:0E
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1d:f9:fa:bd:cb:ad:76:cc:31:cd:90:65:03:3f:a0:dd:1c:
7b:9d:00:9b:a9:a2:7b:c5:8e:62:29:9d:85:5e:cb:a4:ae:94:
ed:2b:a9:56:cc:87:49:54:5f:ff:ff:0c:b2:33:21:73:38:b4:
2e:43:55:d6:f3:79:1b:60:96:ab:bb:07:0d:1c:04:6f:c6:dd:
d0:b6:26:90:79:fd:23:7e:3a:aa:36:fa:1a:c7:b7:f3:3f:ef:
57:09:95:16:6a:70:f5:62:2a:7a:b3:2c:c6:bd:15:e8:b0:91:
33:14:07:d7:bf:be:d9:3c:d3:55:53:a0:38:5e:f4:b8:89:f7:
c8:42:0a:2a:82:5c:f1:e9:ce:cf:37:ae:93:61:02:f7:ed:33:
0f:18:92:f6:74:20:c7:77:fa:d0:b4:3b:75:b8:65:39:91:c8:
1b:d7:f1:ee:b4:ae:cd:e2:00:7e:0c:f2:42:89:32:fe:b0:4a:
07:ec:3f:8c:d3:a6:fd:32:67:99:72:11:95:9f:d1:a4:9e:94:
77:d8:89:1b:03:3f:b7:a7:b9:61:ab:dd:9b:66:bc:80:fd:c6:
0d:e3:8e:4c:ee:47:a1:1f:20:68:a1:e5:f4:c5:34:54:70:f0:
10:f9:a0:e0:1e:a4:61:ea:82:17:3a:87:ea:2f:b2:e3:00:72:
af:29:aa:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fH1ZPyruI4D4mdJTBLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm
ZWI3NDEwHhcNMjUxMTA0MTMwMjEyWhcNMjUxMTA1MTMwMjEyWjAzMTEwLwYDVQQD
EyhhNWMzYjgwZDNiMmM0ODMxMmViOTk0ZTMxNzg0NDE3MTAwZjRhYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pj+XbNX4VvPi/sO+jDQtPTX6iWu
VXW6uqjXd6wBCD5TzggqPKGl2KwUwLKzDqJTyyARjLELZCSk+O1IkZ1OzIVXQWcf
EzTQMqNSPg8in2swGtGjbsrVfNkSz5k0g1BVoC3O2aMzDzTgNAQJJZPQ8kLsEUjS
aLj7jAnOk09QIeYabCL/oiFZeR7NakhU+F3vavPeZpYRXk0oSfX6Rx3dm+U3Endk
vc/KMJ7PAEpSAitsBRdWUUAZ9F7WmyOOnBuCnW/wx6P6IEuSChkv25r1+JMH0fiK
erjg9Gs5S41uOpjeaGnoVjs7EzXKvXam5ESzZ79k3gR+xb+UQMDkxhhXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXDuA07LEgxLrmU4xeEQXEA9KsOMB8GA1UdIwQY
MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt
ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi
LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAph35+r3L
rXbMMc2QZQM/oN0ce50Am6mie8WOYimdhV7LpK6U7SupVsyHSVRf//8MsjMhczi0
LkNV1vN5G2CWq7sHDRwEb8bd0LYmkHn9I346qjb6Gse38z/vVwmVFmpw9WIqerMs
xr0V6LCRMxQH17++2TzTVVOgOF70uIn3yEIKKoJc8enOzzeuk2EC9+0zDxiS9nQg
x3f60LQ7dbhlOZHIG9fx7rSuzeIAfgzyQoky/rBKB+w/jNOm/TJnmXIRlZ/RpJ6U
d9iJGwM/t6e5Yavdm2a8gP3GDeOOTO5HoR8gaKHl9MU0VHDwEPmg4B6kYeqCFzqH
6i+y4wByrymqeg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client